Bowie Bailey wrote:
> 
> Ah.  I missed the meta limiting it to 3 or more hits.  If it works well,
> maybe we can add it to the stock ruleset.
> 
Step 1 would be a check in someone's sandbox. And maybe a better meta than
freemail, since I do see some false positives in yahoo groups:

Spamassassin found from <x...@returns.groups.yahoo.com> at
n73c.bullet.mail.sp1.yahoo.com [98.136.45.72] HELO
n73c.bullet.mail.sp1.yahoo.com to <XXX>
...snip,DKIM_SIGNED,DKIM_VALID,FREEMAIL_FROM,CAPSNOSPACE,MN_FMIWCAP,snip...
Subject: Re: [RebornDollsArtistCircle] Hello 

so... a freemail post to a yahoo group that has three interword capitals in
the groupname is a false positive (in this case, by the way, the group
message _was_ spam).

A not 'CAPSNOSPACE' or a not yahoogroups would be in order to solve that.

CAPSNOSPACE is:

# Junk with CapsCrapMessageSubjects
header   MN_CAPSNOSPACE  Subject =~ /(?:[A-Z][a-z]+){4}/
describe MN_CAPSNOSPACE Subject ContainsFourWordsLikeThis
score    MN_CAPSNOSPACE  1

-- 
View this message in context: 
http://old.nabble.com/Interword-capitalization-tp31521819p31586088.html
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.

Reply via email to